EasyBook – Hotel & Tour Booking WordPress Theme

EasyBook – Hotel & Tour Booking WordPress Theme has 4 disclosed vulnerabilities in the WordSec catalog, all reported in 2019; all 4 are fixed as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 2 high. 2019 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (75%). Other recurring categories include Authorization Bypass Through User-Controlled Key.

Every one of the 4 issues recorded for EasyBook – Hotel & Tour Booking WordPress Theme has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by R3N0.

Strategic Overview

Avg CVSSMedium

6.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all EasyBook – Hotel & Tour Booking WordPress Theme vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2019-20212

CTHthemes CityBook <= 2.3.3, TownHub <= 1.0.5, and EasyBook <= 1.2.1 - Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

4 records


2019-12-27 00:00	CTHthemes CityBook < 2.3.4, TownHub < 1.0.6, EasyBook < 1.2.2 Themes - Authenticated Post Deleition via IDOR EasyBook < 1.2.2	`CVE-2019-20209`	6.5 Medium	R3N0	Yes
2019-12-27 00:00	CTHthemes CityBook <= 2.3.3, TownHub <= 1.0.5, and EasyBook <= 1.2.1 - Stored Cross-Site Scripting EasyBook <= 1.2.1	`CVE-2019-20212`	7.2 High	R3N0	Yes
2019-12-27 00:00	CTHthemes CityBook <= 2.3.3, TownHub <= 1.0.5, and EasyBook <= 1.2.1 - Stored Cross-Site Scripting EasyBook <= 1.2.1	`CVE-2019-20211`	7.2 High	R3N0	Yes
2019-12-27 00:00	CTHthemes CityBook Theme < 2.3.4, TownHub Theme < 1.0.6, EasyBook Theme < 1.2.2 - Cross-Site Scripting EasyBook < 1.2.2	`CVE-2019-20210`	6.1 Medium	R3N0	Yes

Showing 1–4 of 4 reports